Work-From-Home / Advance Fee Job Scam
Attack Trigger
Unsolicited high-paying remote job offer requiring no experience or qualifications
What Attackers Want
$200–$5,000 in fees or counterfeit check loss
How This Attack Works
Scammers post fake job listings or send unsolicited offers via email and LinkedIn promising high pay for simple remote tasks such as reshipping packages, processing refunds, or data entry. After "hiring," they request fees for training kits or background checks, or mail counterfeit checks for equipment purchases that victims are instructed to partially wire back.
Red Flags to Watch For
- ✗Job offer arrives unsolicited without a prior application
- ✗Salary is significantly above market rate for the described work
- ✗Company cannot be found through independent research or LinkedIn
- ✗Interview conducted only by chat — no video call or phone call
- ✗You are asked to pay for training materials, software, or a background check
- ✗Check sent for equipment purchase is for more than required — you must wire the difference back
- ✗Task involves receiving and forwarding packages or payments (money mule indicator)
Known Malicious Domains
These domains have been associated with this attack. Never click links going to these addresses.
- remote-work-hiring-now.comMALICIOUS
- easy-jobs-daily-pay.netMALICIOUS
- wfh-careers-apply.comMALICIOUS
- home-based-income.netMALICIOUS
Glance automatically blocks emails from domains on this list. Domain list is not exhaustive — attackers register new domains continuously.
How Glance Stops This
- Domain similarity analysis catches lookalike sender addresses at millisecond speed
- SPF / DKIM / DMARC validation flags authentication failures before you ever see the email
- VirusTotal + Google Safe Browsing checks every link in real time
- Urgency language detection scores the email higher for manual review
- Known malicious domain blocklist updated continuously from live scan data
Don't wait to get hit.
Glance scans every incoming email against 12 detection layers — including the exact tactics described above — before it reaches your inbox.
Protect My Inbox — Free